ID de Prueba:	1.3.6.1.4.1.25623.1.0.871641
Categoría:	Red Hat Local Security Checks
Título:	RedHat Update for samba4 RHSA-2016:1487-01
Resumen:	The remote host is missing an update for the 'samba4'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'samba4' package(s) announced via the referenced advisory. Vulnerability Insight: Samba is an open-source implementation of the Server Message Block (SMB) or Common Internet File System (CIFS) protocol, which allows PC-compatible machines to share files, printers, and other information. Security Fix(es): * A flaw was found in the way Samba initiated signed DCE/RPC connections. A man-in-the-middle attacker could use this flaw to downgrade the connection to not use signing and therefore impersonate the server. (CVE-2016-2119) Red Hat would like to thank the Samba project for reporting this issue. Upstream acknowledges Stefan Metzmacher as the original reporter. Affected Software/OS: samba4 on Red Hat Enterprise Linux Desktop (v. 6), Red Hat Enterprise Linux Server (v. 6), Red Hat Enterprise Linux Workstation (v. 6) Solution: Please Install the Updated Packages. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-2119 BugTraq ID: 91700 http://www.securityfocus.com/bid/91700 https://security.gentoo.org/glsa/201805-07 RedHat Security Advisories: RHSA-2016:1486 http://rhn.redhat.com/errata/RHSA-2016-1486.html RedHat Security Advisories: RHSA-2016:1487 http://rhn.redhat.com/errata/RHSA-2016-1487.html RedHat Security Advisories: RHSA-2016:1494 http://rhn.redhat.com/errata/RHSA-2016-1494.html http://www.securitytracker.com/id/1036244 SuSE Security Announcement: openSUSE-SU-2016:1830 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-07/msg00060.html
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.